africaeurope-storefront.one.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 38:70:8f:98:da:31:5c:7e:0f:f0:6d:58:0b:90:7a:73 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=africaeurope-storefront.one.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 38:70:8f:98:da:31:5c:7e:0f:f0:6d:58:0b:90:7a:73
Serial Number (int): 75021217506892620223427606876410378867
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 50:8d:76:73:24:84:24:c1:cf:fd:1f:38:ce:61:3a:44:b5:8f:a2:dd
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): ca:f3:4e:6a:74:49:6d:24:00:d2:21:64:1a:7a:ce:7a:d1:13:92:79
Fingerprint (sha256): 1f:67:25:90:d2:4f:3b:cb:b6:37:c6:c0:19:35:e3:c3:89:1c:5e:e8:fb:a3:fc:6c:87:10:50:9f:fb:33:cb:9f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate africaeurope-storefront.one.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for africaeurope-storefront.one.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africaeurope-storefront.one.org
www.africaeurope-storefront.one.org

Other certificates including the domain name one.org

(limited to 100 certificates)
www-default.actionkit.com
one.org
one.org
act.one.org
www-default.actionkit.com
ssl7009.cloudflare.com
action.one.org
action.standupamerica.com
helpdesk.nibung.com
ssl278675.cloudflaressl.com
connecttheworld.staging.one.org
girlscount.one.org
www-default.actionkit.com
act.progressiowa.org
*.one.org
www-default.actionkit.com
*.bridge.one.org
*.one.org
one.org
act.ayannapressley.com
girlscount.staging.one.org
one.org
www-default.actionkit.com
one.org
act.represent.us
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
one.org
ssl278675.cloudflaressl.com
www-default.actionkit.com
ssl278675.cloudflaressl.com
one.org
www-default.actionkit.com
girlscount.one.org
action.wemove.eu
actiontracker.staging.one.org
helpdesk.nibung.com
helpdesk.nibung.com
www-default.actionkit.com
ssl507706.cloudflaressl.com
www-default.actionkit.com
auth.makenaijastronger.one.org
act.represent.us
assets.one.org
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
helpdesk.nibung.com
africaeurope-storefront.one.org
*.one.org
girlscount.one.org
ssl278675.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
one.org
helpdesk.nibung.com
ssl507704.cloudflaressl.com
www-default.actionkit.com
ssl507705.cloudflaressl.com
helpdesk.nibung.com
www-default.actionkit.com
helpdesk.nibung.com
www-default.actionkit.com
helpdesk.nibung.com
one.org
act.medicare4all.org
ssl310139.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
ssl7009.cloudflare.com
ssl7009.cloudflare.com
helpdesk.nibung.com
ssl507705.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
ssl278675.cloudflaressl.com
act.dirtroaddems.com
www-default.actionkit.com
act.leftnet.org
girlscount.one.org
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
ssl7009.cloudflare.com
connecttheworld.one.org
one.org
www-default.actionkit.com
one.org
act.progressnownm.org
one.org
ssl7009.cloudflare.com
www-default.actionkit.com
ssl507705.cloudflaressl.com
assets.one.org
ssl278674.cloudflaressl.com
one.org
ssl278675.cloudflaressl.com

Certificate

The complete raw certificate details for africaeurope-storefront.one.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfC5aFDEvB4SPtrnLGdT
Dx4TVeI5mTL71k/vDBmIEKtN7QiP7gl1iVrwYtlMAf1tL0692A/ccawBrKYSItUm
I9iLCDC03qLLtGZBIPcsTsZkDm9OYEzZ/KzFiuFnMLukue7scICT7H0Ib3L6VsR7
B1v59FB0LujZnwLXt8VqVZJONsS/AutKzZUTJXxWWsR+vuu4Bvx3iP8mnYUzauN7
xZBLYulDmbHPHNAjt7bMujXOjm/PImMiqkJqCuhVshFonajrJ9ygAcgo2CTPkhJA
JYTbOe5RS/KbHgLYAVWBt/00cPv2SArPdvBUawfasEeBYVWmYdMwD82JJ9aJmyKb
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75021217506892620223427606876410378867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'africaeurope-storefront.one.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25997558068936557328040938071923147154674627260212234927863426357839790588333884147498888524428743999126961429478086860958449993100416602661806654384904867931960000679488816137466993929943994469409015397882686352493221267545246877021929168707229354685325364061980545291050533828927056028702625274934811823879103905456006341058077135152592776378072921669008849825552453098734394780690315385593097136160771150730284839464424682856170154756823432621394595274275359032141675675154897508663891534410481663238360160799518089235741604912073290238411026931421168212104111194272248743864856844230502639621783836564033072438231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							508d7673248424c1cffd1f38ce613a44b58fa2dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaeurope-storefront.one.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaeurope-storefront.one.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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